Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: C6ThMt112y16VVulqwfFx+fLRZcULze6IJ3Cs1PjNiU=
Subject key identifier: 93:6B:C2:5C:5B:2D:F6:D7:B1:6A:FD:ED:12:01:66:1F:52:F6:62:0D
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019A1FBF43557C694F81564CF83BAB7874F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 0119
Signing time: Sun 26 Oct 2025 09:00:19 +0000
Manifest this update: Sun 26 Oct 2025 09:00:19 +0000
Manifest next update: Mon 27 Oct 2025 09:00:19 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: 1An1o6Y5hacuQk5C6thxSmu+YyqxFVsUP3Zqli8Mjbc=)
2: Q4iWZ496HCNmYZBIWBOYyxR29Uc.roa (hash: 7wrmL3IIhgsOUmrN36LQ1NncM+5WHq2SxfG9P1s/Hs8=)
3: elJZVsJM-cu186hJqa3wLJ-HvIY.roa (hash: ARy/RhAUZB3gjAcZcQ/EM7MONeLO821NzwpDjV1Ze2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:43:55:7c:69:4f:81:56:4c:f8:3b:ab:78:74:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Oct 26 09:00:19 2025 GMT
Not After : Oct 27 09:00:19 2025 GMT
Subject: CN=936bc25c5b2df6d7b16afded1201661f52f6620d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f4:d2:3d:ab:48:a7:36:01:1b:85:ce:e3:04:
2b:0f:01:20:f3:39:47:93:3e:bd:1e:ca:fb:a7:de:
04:7c:34:67:f7:58:58:59:1c:68:10:3c:5d:97:a4:
e6:27:e3:71:19:9e:e9:54:f8:f9:ee:2e:03:7b:73:
d1:1f:5f:b2:2a:c3:2f:5f:99:af:be:b7:27:80:8d:
f2:94:5e:58:b0:c5:64:2e:04:09:7b:f2:f4:d4:0c:
97:8e:4a:37:06:33:45:b5:c8:84:2b:0a:cb:73:10:
36:d5:13:92:54:79:65:8e:1f:aa:78:28:bb:0c:00:
17:98:32:63:ca:2a:13:6c:ab:2b:71:db:85:36:a2:
d3:7b:6f:1a:84:1f:16:9c:fb:a2:93:a3:89:ee:42:
9c:53:a3:bd:79:fd:7c:5f:dd:83:77:48:e6:b5:24:
9f:ad:54:dc:e3:b7:a1:56:1e:47:aa:87:ee:cf:45:
b6:98:8d:4e:53:1f:84:2d:b2:ff:43:b5:80:75:63:
71:45:e4:91:fa:0d:cf:fd:9e:27:7e:f8:4c:4f:35:
c3:15:23:e7:76:07:f2:a4:c1:65:2b:9c:91:9d:7f:
67:95:0f:26:03:82:dd:6e:07:bd:b9:84:ba:e6:80:
40:99:1b:97:ba:d5:91:c9:1b:bd:09:6a:1a:c1:f3:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6B:C2:5C:5B:2D:F6:D7:B1:6A:FD:ED:12:01:66:1F:52:F6:62:0D
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:22:83:5f:b5:61:72:ed:c5:e7:b6:1b:d9:64:63:c0:22:8a:
04:1e:9e:cb:a4:fe:07:d7:43:8d:c7:bb:ed:16:83:b4:de:cb:
5a:d0:fb:5c:0b:bb:5f:ed:9f:6b:ce:d3:71:6f:17:3b:55:c3:
e2:1d:cb:fa:da:67:a6:68:29:ce:f0:de:4e:70:48:9f:32:43:
db:b4:24:c8:b4:f7:f0:f4:15:db:bc:0f:4a:da:08:22:e5:6e:
57:c0:18:c2:4c:33:62:98:d1:96:bd:24:4e:51:6e:62:75:c1:
75:75:d0:7e:00:c1:47:6c:fc:40:17:0d:76:d5:6f:1f:ef:6d:
df:39:11:31:dc:07:54:48:23:2f:c7:4d:34:7b:2f:7e:e3:61:
20:1a:e1:96:d9:53:1f:ac:8a:5a:19:ab:87:c3:f0:01:f8:69:
e0:fe:ce:15:67:7d:0a:0b:e6:dc:61:56:34:3d:14:ce:e7:bb:
da:38:19:8d:ad:e8:61:a7:f6:0f:67:49:eb:d4:b9:2d:e4:10:
e6:33:1f:8c:84:4d:7d:30:86:47:f0:f3:7d:17:d0:78:1d:c3:
46:c0:51:e5:c1:3f:b0:28:12:0f:79:e7:57:4e:09:d6:32:1f:
dc:4d:5f:83:f9:fe:14:fc:b9:93:e5:1a:52:55:52:5c:0e:78:
d5:f4:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:20:36 2025 by rpki-client